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PATENT 



REMARKS 



Applicants respectfully request reconsideration of this application and reconsideration 



of the Office Action dated March 18, 2005, in view of the following remarks. Upon entry of 
this Response, Claims 6-71 will remain pending in this application. 

On June 18, 2004, Applicants filed an Amendment in response to the Office Action of 
March 19, 2004. In the June 18, 2004 Amendment, Applicants (1) cancelled original Claims 
1-5 without prejudice, which were rejected by the Examiner as being anticipated by U.S. Pat. 
No. 6,584,569 to Reshef et al- fResheT); (2) presented new Claims 6-71, which Applicants 
submit are supported by the specification, as originally filed, and in condition for allowance; 
and (3) presented new Claims 72-102, which were copied from Reshef to provoke an 
interference between the above-identified application and Reshef. A request for interference 
under 37 C.F.R. § 1.607 was included in Applicants' June 18, 2004 Amendment. 

Subsequently, on October 8, 2004, as a result of a Cross License entered into on or 
about September 30, 2004 by the assignee of the above-identified application and the 
assignee of Reshef Applicants filed a Supplemental Amendment canceling Claims 72-102 
without prejudice and withdrawing the request for interference under 37 C.F.R. § 1.607. 

Consequently, Claims 6-17 remain pending in the above-identified application. 

In the most recent Office Action of March 18, 2005, the Examiner has requested that 
Applicants point out the patentable distinctions between pending Claims 6-71 and the applied 
Reshef reference. Without admitting that Reshef is valid prior art, Applicants respectfully 
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submit that, as set forth in the subsequent remarks, Reshef does not teach or suggest all of tbe 
elements of independent Claims 6, 1 9, 3 1, 42, 52, and 63, and the dependent claims thereof. 

As is clear from tbe above-identified application, the present invention relates to a 
process and system for detecting security vulnerabilities present in a target Web site. 

Independent Claim 6, and the dependent claims thereof, include the step of 
"automatically passing an authorized usemame and password to the target Web site, if 
required to gain access to the target Web site." Similarly, independent Claim 42, and the 
dependent claims thereof, include the element of a processor being configured to 
"automatically pass an authorized usemame and password to the target Web site, if required 
to gain access to the target Web site." 

Applicants submit that Reshef does not teach or suggest at least the above-identified 
step of Claim 6 and element of Claim 42. Where Reshef does not teach all of the steps of 
Claim 6 and elements of Claim 42, there can be no anticipation under 35 U.S.C. § 102. 

Because Claims 7-18 are dependent on Claim 6 and Claims 43-51 are dependent on 
Claim 42, Applicants respectfully submit that Claims 7-18 and 43-51 are allowable for the 
reasons stated above. 

Independent Claim 19, and the dependent claims thereof, include the step of "parsing 
through the default Web page to identify any linked-to Web pages or objects which arc 
included in the default Web page, wherein the parsing includes performing a keyword search 
in order to detect at least one point of interest." Similarly, independent Claim 52, and the 
dependent claims thereof, include the element of a processor being configured to "parse 
through the default Web page to identify any linked-to Web pages or objects which are 
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included in the default Web page, wherein the parsing includes performing a keyword search 
in order to detect at least one point of interest." 

Applicants submit that Reshef does not teach or suggest at least the above-identified 
step of Claim 19 and element of Claim 52. Where Reshef does not teach all of the steps of 
Claim 19 and elements of Claim 52, there can be no anticipation under 35 U.S.C. § 102. 

Because Claims 20-30 are dependent on Claim 19 and Claims 53-62 are dependent on 
Claim 52, Applicants respectfully submit that Claims 20-30 and 53-62 are allowable for the 
reasons stated above. 

Independent Claim 31, and the dependent claims thereof, include the step of 
"applying at least one predetermined hack method to the target Web site in order to identify 
security vulnerabilities, wherein the applying at least one predetermined hack method 
includes attempting to access unauthorized files located outside the target Web site's root 
directory " Similarly, independent Claim 63, and the dependent claims thereof, include the 
element of a processor being configured to "apply at least one predetermined hack method to 
the target Web site in order to identify security vulnerabilities, wherein the applying at least 
one predetermined hack method includes attempting to access unauthorized files located 
outside the target Web site's root directory." 

Applicants submit that Reshef doe* not teach or suggest at least the above-identified 
step of Claim 31 and element of Claim 63. Where Reshef docs not teach all of the steps of 
Claim 31 and elements of Claim 63, there can be no anticipation under 35 U.S.C. § 1 02. 
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Because Claims 32-41 are dependent on Claim 31 and Claims 64-71 are dependent on 
Claim 63, Applicants respectfully submit that Claims 32-41 and 64-71 are allowable for the 
reasons stated above. 

In view of the foregoing, allowance of previously presented Claims 6-71 is earnestly 
solicited. 

If any additional fees are due in connection with the filing of this Response or the 
accompanying papers, such as fees under 37 CJ.R. §§ 1.16 or 1.17, please charge the fees to 
SGR Deposit Account No. 02-4300, Order No. 042600.005. If an additional extension of 
time under 37 C.F.R. § 1.136 is necessary that is not accounted for in the papers filed 
herewith, such an extension is requested. The additional extension fee also should be charged 
to SGR Deposit Account No. 02-4300, Order No. 042600.005. Any overpayment can be 
credited to Deposit Account No. 02-4300, Order No. 042600.005. 



Dated: April 18, 2005 

SMITH, GAMBRELL & RUSSELL, LLP 

1230 Peachtree Street, NE. 

Suite 3 100, Promenade II 

Atlanta, GA 30309-3592 

TEL: (404) 815-3649 

FAX: (404) 685-6949 



PAGE 21/21 * RCVD AT 4/18/2005 1 :08:41 PM [Eastern Daylight Time] * SVR:USPT0-EFXRF-1/5 ft DNIS:8729306 " CSID:404 815 3509 * DURATION (mm-ss):05-26 



Respectfully submitted, 




Coby S, Nixon, Reg. No. 56,424 
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